ICAM Architect

Booz Allen Hamilton

Confirmed live today Low trust

Quick summary

Work type
On-site
Location
McLean, VA
Employment
Full-time
Posted
110 days ago
Freshness
Confirmed live today

Market check

Salary context

How this pay compares to similar roles

Similar $203k
$141k $255k
below market most similar roles pay here above market

This listing doesn't post a salary. Most similar roles pay $162,150–$243,912.

Based on 240 similar postings.

Employer

About Booz Allen Hamilton

Booz Allen Hamilton is a management and technology consulting firm that provides analytics, digital, engineering, and cybersecurity solutions primarily to U.S. government agencies and commercial clients. Industry: Management & Technology Consulting

Booz Allen Hamilton currently has 1662 open roles on FindRole.

Listed pay typically runs $86,800–$198,000 across 904 roles with salary data.

Most-posted roles

View all roles at Booz Allen Hamilton

At a glance

TL;DR · ICAM Architect

The ICAM Architect joins the team to support large-scale Identity and Access Management projects within a Zero Trust framework. This role involves interfacing with stakeholders and engineering teams to analyze identity lifecycles, articulate access requirements, and define enterprise identity records. You will design, deploy, and support systems that verify user privileges and manage credentials for critical assets, including single sign-on and privileged access systems. Key technical requirements include experience with Entra ID, certificate-based authentication, and languages like Java, JavaScript, Python, PowerShell, or Groovy. You must also utilize RESTful APIs, Active Directory, and LDAP. The work focuses on solving complex identity and federation issues, such as token validation errors and assertion mismatches, while implementing password-less or multifactor authentication within identity provider environments.

What you'll do

  • Analyze the identity lifecycle to articulate access requirements and define enterprise identity records.
  • Design, deploy, and support systems that verify user privileges and manage credentials for valuable assets.
  • Implement enterprise-class solutions including single sign-on and privileged access systems.
  • Integrate identity providers with external applications using RESTful APIs to automate lifecycle processes.
  • Synchronize and integrate identity systems with Active Directory or LDAP.
  • Resolve complex identity and federation issues such as token validation errors and assertion mismatches.
  • Implement password-less authentication and multi-factor authentication within the IdP environment.
  • Integrate identity provider code and configurations into DevOps and CI/CD pipelines for automated deployment.

What we're looking for

  • U.S. citizenship is required.
  • High school diploma or GED is required.
  • Experience with Entra ID and certificate-based authentication is required.
  • Experience with identity platform development and automation languages like Java, JavaScript, Python, PowerShell, or Groovy is required.
  • Experience working with RESTful APIs to integrate identity providers and automate lifecycle processes is required.
  • Experience integrating and synchronizing with Active Directory (AD), LDAP, or AD Management is required.
  • Knowledge of Zero Trust architectures and implementation of password-less or multifactor authentication (MFA) is required.
  • Bachelor's degree in CS, Cybersecurity, or IT (preferred).

More like this

Similar roles

IDAM Architect, Lead

Booz Allen Hamilton

Fort Meade, MD 64 days ago
Identity and Access Management (IAM) Zero Trust Active Directory Entra ID LDAP SailPoint Okta Saviynt SIEM UEBA PKI SSO Python REST JSON XML HTTP NIST SP 800-53 STIGs Agile
7+ yrs exp

ICAM Engineer

Booz Allen Hamilton

Scott AFB, IL +1 49 days ago
Ping Identity Entra ID Okta ADFS SAML 2.0 OAuth 2.0 OpenID Connect RBAC ABAC Active Directory LDAP Zero Trust AWS Azure Google Cloud Python PowerShell Bash MFA SSO

Enterprise ICAM Architect

Booz Allen Hamilton

McLean, VA 56 days ago
ICAM Zero Trust SSO IGA PAM Directory Services Entra ID Okta Saviynt CyberArk PingIdentity AWS Azure VMWare Kanban Agile SAFe NIST 800-53 STIGs FIPS RBAC MFA Cloud Security

ICAM Engineer

Booz Allen Hamilton

San Diego, CA 81 days ago
IAM Active Directory LDAP Okta Duo CyberArk Delinea Azure AWS PKI PIV Microsoft Identity Manager SailPoint Saviynt One Identity Splunk ELK Stack IGA PAM Zero Trust

ICAM Engineer, Senior

Booz Allen Hamilton

Scott AFB, IL +1 40 days ago $86,800–$198,000
Ping Federate Entra ID Okta ADFS SAML 2.0 OAuth 2.0 OpenID Connect RBAC ABAC Active Directory LDAP Zero Trust AWS Azure Google Cloud Python PowerShell Bash Jira Confluence

CIAM Senior Architect Manager, VP

State Street

Clifton, NJ 58 days ago
CIAM IAM SAML OAuth OpenID SCIM XACML SPML SSO Federation API Gateway MFA PAM Risk Based Authentication ForgeRock AWS NIST SP800-63 SOA
5+ yrs exp